{"id":5186,"date":"2026-10-28T15:51:38","date_gmt":"2026-10-28T14:51:38","guid":{"rendered":"https:\/\/www.prismia.ch\/?p=5186"},"modified":"2026-10-28T18:12:20","modified_gmt":"2026-10-28T17:12:20","slug":"shadow-ai-swiss-companies","status":"publish","type":"post","link":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/","title":{"rendered":"Shadow AI: ban it, ignore it or manage it?"},"content":{"rendered":"<p>The colleague at the next desk may have ChatGPT open in a tab, on a personal account. This morning they pasted in the minutes of a client meeting to get a clean summary. They saved twenty minutes, and nobody will know: not you, not the IT department.<\/p>\n<p>This is what we call Shadow AI. In French-speaking Switzerland, 27% of people who use AI at work do so without their employer&#8217;s approval, according to the Qualinsight study published in spring 2026. And that figure only counts those who are willing to admit it.<\/p>\n<p>In this article, we look at what Shadow AI is, why it is spreading, what risks it creates and how to manage it without slowing down the people who benefit from it. What we have learned in our assignments fits in one sentence: you need a framework and tools, and one does not work without the other.<\/p>\n<div class=\"callout\">\n<div class=\"dd-tag\">Swiss survey&nbsp;\u00b7&nbsp;1&nbsp;minute<\/div>\n<p>Do you use AI tools at work that your organisation does not provide? No study measures this across Switzerland yet. We are running an <strong>anonymous<\/strong> survey of 7 questions, open until 31 December 2026, with results published on 15 January 2027.<\/p>\n<p class=\"cta-enquete\" style=\"margin:18px 0 4px\"><a class=\"btn btn-primary\" href=\"https:\/\/www.prismia.ch\/survey\/?lang=en&amp;src=a2en\" style=\"color:#fff;text-align:left\">Take the survey&nbsp;\u00b7&nbsp;1&nbsp;minute <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M5 12h14M13 6l6 6-6 6\"\/><\/svg><\/a><\/p>\n<\/div>\n<div class=\"savoir\">\n<div class=\"dd-tag\">The essentials in 30 seconds<\/div>\n<ul>\n<li><strong>Shadow AI<\/strong> is the use of AI tools at work without the company&#8217;s approval or control: a personal ChatGPT account, a browser extension, a bot that records meetings.<\/li>\n<li>It spreads because the time saving is real, and because the company often provides <strong>neither clear rules nor a suitable tool<\/strong>. In French-speaking Switzerland, 49% of employees say their organisation has no clear rules on AI, and 79% have never been trained.<\/li>\n<li>The main risk: <strong>data about clients, employees or confidential information<\/strong> leaving for services hosted outside Switzerland, with no safeguards.<\/li>\n<li><strong>Banning<\/strong> does not stop the usage, it makes it invisible. <strong>Ignoring<\/strong> lets the risk build up unseen.<\/li>\n<li>The approach that holds: <strong>a framework<\/strong> (governance, AI policy) <strong>and tools<\/strong> (AI gateway, approved tools, training). Without a framework, you create risk. Without the right tool, people work around you.<\/li>\n<\/ul>\n<\/div>\n<div class=\"pia-shadow-anim\" role=\"img\" aria-label=\"Open-plan office seen from above: employees work at their desks, one drinks a coffee, another goes to talk to a colleague. Now and then, a bubble with a pirate flag appears next to someone using an unapproved AI tool, while the people around them notice nothing.\">\n<style> .pia-shadow-anim{position:relative;width:100%;aspect-ratio:16\/9;border-radius:16px;overflow:hidden;background:#EEF2FD;line-height:0} .pia-shadow-anim svg{display:block;width:100%;height:100%} <\/style>\n<p> <svg viewBox=\"0 0 800 450\" aria-hidden=\"true\" focusable=\"false\"><\/svg> <script> (function () { var root = document.currentScript.parentNode, svg = root.querySelector('svg'); var NS = 'http:\/\/www.w3.org\/2000\/svg', P = 'pia-sa2-', LOOP = 12, TAU = Math.PI * 2; function el(tag, a, parent) { var e = document.createElementNS(NS, tag); for (var k in a) e.setAttribute(k, a[k]); (parent || svg).appendChild(e); return e; } function cl(x) { return Math.min(1, Math.max(0, x)); } function lt(a, b) { return Math.sign(b - a) === 1; } function ease(x) { x = cl(x); return lt(x, 0.5) ? 4 * x * x * x : 1 - Math.pow(-2 * x + 2, 3) \/ 2; } function backOut(x) { x = cl(x); var c = 1.9; return 1 + (c + 1) * Math.pow(x - 1, 3) + c * Math.pow(x - 1, 2); } function mix(a, b, k) { return a + (b - a) * k; } function mixC(a, b, k) { return 'rgb(' + [0, 1, 2].map(function (i) { return Math.round(mix(a[i], b[i], k)); }).join(',') + ')'; } function angLerp(a, b, k) { return a + (((b - a + 540) % 360) - 180) * k; } function frac(x) { return x - Math.floor(x); } function tr(e, s) { e.setAttribute('transform', s); } function grad(id, stops, x2, y2) { var g = el('linearGradient', { id: P + id, x1: 0, y1: 0, x2: x2 == null ? 0 : x2, y2: y2 == null ? 1 : y2 }, defs); stops.forEach(function (s) { el('stop', { offset: s[0], 'stop-color': s[1], 'stop-opacity': s[2] == null ? 1 : s[2] }, g); }); } function url(id) { return 'url(#' + P + id + ')'; } \/* ---------- defs ---------- *\/ var defs = el('defs', {}); el('feGaussianBlur', { stdDeviation: 7 }, el('filter', { id: P + 'glow', x: '-60%', y: '-60%', width: '220%', height: '220%' }, defs)); el('feGaussianBlur', { stdDeviation: 4 }, el('filter', { id: P + 'soft', x: '-30%', y: '-30%', width: '160%', height: '160%' }, defs)); el('feDropShadow', { dx: 0, dy: 6, stdDeviation: 7, 'flood-color': '#1929DD', 'flood-opacity': 0.22 }, el('filter', { id: P + 'sh', x: '-40%', y: '-40%', width: '180%', height: '180%' }, defs)); grad('wall', [[0, '#E9EEFF'], [1, '#D8E1FF']]); grad('glass', [[0, '#B7CBFF'], [1, '#E6EEFF']], 1, 1); grad('light', [[0, '#FFFFFF', 0.75], [1, '#FFFFFF', 0]]); grad('wood', [[0, '#EFDDC4'], [1, '#E5CDAB']]); grad('lamp', [[0, '#FFE2A8', 0.35], [1, '#FFE2A8', 0]]); var SHADOW = '#1929DD'; function shadowRect(x, y, w, h, rx, op) { el('rect', { x: x + 4, y: y + 7, width: w, height: h, rx: rx, fill: SHADOW, opacity: op || 0.09, filter: url('soft') }); } function block(x, y, w, h, rx, top, face, depth) { el('rect', { x: x, y: y + depth, width: w, height: h, rx: rx, fill: face }); return el('rect', { x: x, y: y, width: w, height: h, rx: rx, fill: top }); } \/* ---------- floor, light, walls ---------- *\/ el('rect', { width: 800, height: 450, fill: '#EEF2FD' }); var planks = el('g', { stroke: '#E2E8FA', 'stroke-width': 1 }); for (var py = 76, row = 0; lt(py, 450); py += 22, row++) { el('line', { x1: 0, y1: py, x2: 800, y2: py }, planks); for (var px = 30 + (row % 3) * 47; lt(px, 800); px += 140) el('line', { x1: px, y1: py - 22, x2: px, y2: py }, planks); } var WIN = [[95, 205], [310, 420], [525, 635]]; WIN.forEach(function (w) { el('polygon', { points: w[0] + ',54 ' + w[1] + ',54 ' + (w[1] + 95) + ',330 ' + (w[0] + 95) + ',330', fill: url('light') }); }); el('rect', { x: 0, y: 0, width: 800, height: 54, fill: url('wall') }); el('rect', { x: 0, y: 0, width: 800, height: 9, fill: '#C3CFF7' }); el('rect', { x: 0, y: 50, width: 800, height: 5, fill: '#C9D4FA' }); WIN.forEach(function (w) { el('rect', { x: w[0] - 4, y: 13, width: w[1] - w[0] + 8, height: 35, rx: 3, fill: '#fff' }); el('rect', { x: w[0], y: 16, width: w[1] - w[0], height: 29, rx: 1.5, fill: url('glass') }); el('rect', { x: (w[0] + w[1]) \/ 2 - 1.5, y: 16, width: 3, height: 29, fill: '#fff' }); el('path', { d: 'M' + (w[0] + 14) + ',45 L' + (w[0] + 34) + ',16 M' + (w[0] + 26) + ',45 L' + (w[0] + 40) + ',16', stroke: '#fff', 'stroke-width': 3, opacity: 0.55 }); }); el('circle', { cx: 257, cy: 31, r: 12, fill: '#fff', stroke: '#232B5E', 'stroke-width': 2.5 }); el('line', { x1: 257, y1: 31, x2: 262, y2: 27, stroke: '#232B5E', 'stroke-width': 2, 'stroke-linecap': 'round' }); var minute = el('line', { x1: 257, y1: 31, x2: 257, y2: 22, stroke: '#2C55FB', 'stroke-width': 1.6, 'stroke-linecap': 'round' }); el('circle', { cx: 257, cy: 31, r: 1.6, fill: '#232B5E' }); el('rect', { x: 457, y: 16, width: 30, height: 30, rx: 2, fill: '#fff', stroke: '#C3CFF7', 'stroke-width': 2 }); el('rect', { x: 462, y: 30, width: 20, height: 11, fill: '#91B1FF' }); el('circle', { cx: 476, cy: 25, r: 5, fill: '#2C55FB' }); el('rect', { x: 676, y: 13, width: 102, height: 34, rx: 3, fill: '#fff', stroke: '#C3CFF7', 'stroke-width': 2.5 }); el('path', { d: 'M686,36 L700,27 L712,32 L728,20', fill: 'none', stroke: '#2C55FB', 'stroke-width': 2, 'stroke-linecap': 'round', 'stroke-linejoin': 'round' }); el('path', { d: 'M740,22 h28 M740,29 h20 M740,36 h24', stroke: '#91B1FF', 'stroke-width': 2, 'stroke-linecap': 'round' }); el('rect', { x: 700, y: 47, width: 54, height: 3, rx: 1.5, fill: '#C3CFF7' }); el('rect', { x: 0, y: 0, width: 10, height: 450, fill: '#C3CFF7' }); el('rect', { x: 790, y: 0, width: 10, height: 450, fill: '#C3CFF7' }); \/* ---------- plants ---------- *\/ var plants = []; function plant(x, y, r) { el('circle', { cx: x + 4, cy: y + 7, r: r * 1.05, fill: SHADOW, opacity: 0.1, filter: url('soft') }); el('circle', { cx: x, cy: y, r: r * 0.72, fill: '#D9B58C' }); el('circle', { cx: x, cy: y, r: r * 0.6, fill: '#8E6B4E' }); var g = el('g', {}), n = lt(20, r) ? 9 : 7; for (var i = 0; lt(i, n); i++) el('ellipse', { cx: 0, cy: -r * 0.55, rx: r * 0.3, ry: r * 0.55, fill: i % 2 ? '#2F8A5D' : '#3E9E6E', transform: 'rotate(' + (i * 360 \/ n) + ')' }, g); for (i = 0; lt(i, 5); i++) el('ellipse', { cx: 0, cy: -r * 0.32, rx: r * 0.2, ry: r * 0.36, fill: '#5BBF8A', transform: 'rotate(' + (i * 72 + 30) + ')' }, g); plants.push({ g: g, x: x, y: y, ph: plants.length * 1.3 }); } \/* ---------- left zone: big plant, bookshelf, printer ---------- *\/ plant(44, 98, 30); shadowRect(10, 170, 32, 166, 4); block(10, 170, 32, 160, 4, '#E3C9A6', '#C9A57C', 6); var BOOK = ['#2C55FB', '#91B1FF', '#1929DD', '#DAE3FF', '#2C55FB', '#F28B74', '#91B1FF', '#232B5E']; for (var by = 176, bi = 0; lt(by, 322); bi++) { var bh = 5 + (bi * 7) % 6; if (bi % 6 === 5) { by += 9; continue; } el('rect', { x: 13 + (bi % 3), y: by, width: 25 - (bi % 3), height: bh, rx: 1.2, fill: BOOK[bi % BOOK.length] }); by += bh + 1; } shadowRect(18, 372, 48, 46, 6); block(18, 372, 48, 42, 6, '#FFFFFF', '#C9D4FA', 6); el('rect', { x: 24, y: 377, width: 36, height: 12, rx: 3, fill: '#DAE3FF' }); el('rect', { x: 28, y: 396, width: 28, height: 12, rx: 1, fill: '#fff', stroke: '#DAE3FF', 'stroke-width': 1.5 }); el('circle', { cx: 54, cy: 383, r: 2.2, fill: '#14B8A6' }); el('circle', { cx: 262, cy: 338, r: 10, fill: SHADOW, opacity: 0.1, filter: url('soft') }); el('circle', { cx: 258, cy: 332, r: 10, fill: '#C9D6FF' }); el('circle', { cx: 258, cy: 332, r: 7.5, fill: '#AFC2F7' }); el('circle', { cx: 256, cy: 330, r: 3, fill: '#fff' }); \/* ---------- right zone: coffee counter, lounge ---------- *\/ shadowRect(734, 62, 56, 112, 8); block(734, 62, 56, 108, 8, url('wood'), '#D2B189', 7); el('rect', { x: 746, y: 70, width: 36, height: 36, rx: 8, fill: '#232B5E' }); el('rect', { x: 752, y: 76, width: 24, height: 9, rx: 3, fill: '#3A4580' }); el('circle', { cx: 764, cy: 95, r: 5, fill: '#91B1FF' }); [[754, 128], [773, 131]].forEach(function (c) { el('circle', { cx: c[0], cy: c[1], r: 6, fill: '#fff' }); el('circle', { cx: c[0], cy: c[1], r: 3.5, fill: '#8B5A3C' }); }); var counterMug = el('g', {}); el('circle', { cx: 760, cy: 150, r: 6, fill: '#fff' }, counterMug); el('circle', { cx: 760, cy: 150, r: 3.5, fill: '#8B5A3C' }, counterMug); var steam = [0, 1, 2].map(function () { return el('circle', { fill: '#fff' }); }); el('rect', { x: 674, y: 296, width: 116, height: 150, rx: 12, fill: '#DAE3FF' }); el('rect', { x: 681, y: 303, width: 102, height: 136, rx: 8, fill: 'none', stroke: '#C5D3FF', 'stroke-width': 2, 'stroke-dasharray': '6 5' }); var lampGlow = el('circle', { cx: 722, cy: 316, r: 40, fill: url('lamp') }); shadowRect(750, 304, 40, 132, 12, 0.14); block(750, 304, 40, 128, 12, '#1929DD', '#1320B0', 6); el('rect', { x: 776, y: 304, width: 14, height: 128, rx: 6, fill: '#1424B5' }); el('rect', { x: 754, y: 320, width: 24, height: 46, rx: 7, fill: '#2C55FB' }); el('rect', { x: 754, y: 370, width: 24, height: 46, rx: 7, fill: '#2C55FB' }); el('rect', { x: 762, y: 328, width: 15, height: 18, rx: 5, fill: '#DAE3FF', transform: 'rotate(-14 769 337)' }); el('rect', { x: 752, y: 392, width: 27, height: 26, rx: 4, fill: '#F28B74' }); el('path', { d: 'M752,400 h27 M752,408 h27', stroke: '#E57A62', 'stroke-width': 2 }); shadowRect(708, 342, 34, 54, 8); block(708, 342, 34, 50, 8, url('wood'), '#D2B189', 5); el('rect', { x: 714, y: 350, width: 16, height: 21, rx: 1.5, fill: '#fff', transform: 'rotate(-10 722 360)' }); el('rect', { x: 717, y: 354, width: 9, height: 6, fill: '#91B1FF', transform: 'rotate(-10 722 360)' }); el('circle', { cx: 731, cy: 381, r: 5.5, fill: '#fff' }); el('circle', { cx: 731, cy: 381, r: 3.2, fill: '#8B5A3C' }); el('circle', { cx: 726, cy: 321, r: 13, fill: SHADOW, opacity: 0.1, filter: url('soft') }); el('circle', { cx: 722, cy: 316, r: 12, fill: '#FFF6E5', stroke: '#F0D9B5', 'stroke-width': 2 }); el('circle', { cx: 722, cy: 316, r: 3.5, fill: '#F0D9B5' }); plant(700, 428, 17); \/* ---------- desks ---------- *\/ var DESKS = [[150, 66], [365, 66], [580, 66], [150, 288], [365, 288], [580, 288]]; var screens = DESKS.map(function (d, i) { var x = d[0], y = d[1]; shadowRect(x - 75, y, 150, 66, 10, 0.1); block(x - 75, y, 150, 62, 10, url('wood'), '#D2B189', 7); el('path', { d: 'M' + (x + 4) + ',' + (y + 40) + ' q6,10 22,10 t30,8', fill: 'none', stroke: '#232B5E', 'stroke-width': 1.4, opacity: 0.25 }); var glow = el('rect', { x: x - 38, y: y + 4, width: 76, height: 38, rx: 10, filter: url('glow') }); el('rect', { x: x - 34, y: y + 7, width: 68, height: 30, rx: 5, fill: '#232B5E' }); var scr = el('rect', { x: x - 30.5, y: y + 10.5, width: 61, height: 23, rx: 2.5 }); var clip = el('clipPath', { id: P + 'c' + i }, defs); el('rect', { x: x - 30.5, y: y + 10.5, width: 61, height: 23, rx: 2.5 }, clip); var lines = el('g', { 'clip-path': url('c' + i) }), linesIn = el('g', {}, lines); for (var k = 0; lt(k, 9); k++) el('rect', { x: x - 26, y: y + 13 + k * 5, width: [40, 28, 46, 20][k % 4], height: 2.2, rx: 1.1 }, linesIn); el('rect', { x: x - 9, y: y + 37, width: 18, height: 4, rx: 2, fill: '#232B5E' }); el('rect', { x: x - 24, y: y + 45, width: 48, height: 11, rx: 3, fill: '#fff' }); el('path', { d: 'M' + (x - 20) + ',' + (y + 49) + ' h40 M' + (x - 20) + ',' + (y + 52.5) + ' h40', stroke: '#DAE3FF', 'stroke-width': 1.3 }); el('ellipse', { cx: x + 35, cy: y + 50, rx: 4.2, ry: 5.8, fill: '#fff' }); if (i === 0 || i === 3) { el('circle', { cx: x - 55, cy: y + 22, r: 6.5, fill: '#fff' }); el('circle', { cx: x - 55, cy: y + 22, r: 3.8, fill: '#8B5A3C' }); } if (i === 0 || i === 4) { el('rect', { x: x - 66, y: y + 34, width: 22, height: 17, rx: 2, fill: '#2C55FB', transform: 'rotate(-8 ' + (x - 55) + ' ' + (y + 42) + ')' }); el('rect', { x: x - 64, y: y + 36, width: 2.5, height: 13, fill: '#1929DD', transform: 'rotate(-8 ' + (x - 55) + ' ' + (y + 42) + ')' }); } if (i === 2 || i === 5) { el('rect', { x: x + 44, y: y + 10, width: 20, height: 26, rx: 2, fill: '#fff', transform: 'rotate(8 ' + (x + 54) + ' ' + (y + 23) + ')' }); el('rect', { x: x + 47, y: y + 14, width: 20, height: 26, rx: 2, fill: '#fff', stroke: '#E6ECFF', transform: 'rotate(-4 ' + (x + 57) + ' ' + (y + 27) + ')' }); } if (i === 1) { el('circle', { cx: x + 55, cy: y + 20, r: 8, fill: '#D9B58C' }); for (var j = 0; lt(j, 5); j++) el('ellipse', { cx: x + 55, cy: y + 15, rx: 3, ry: 6, fill: j % 2 ? '#2F8A5D' : '#46A877', transform: 'rotate(' + j * 72 + ' ' + (x + 55) + ' ' + (y + 20) + ')' }); } return { glow: glow, scr: scr, lines: lines, linesIn: linesIn }; }); \/* ---------- people ---------- *\/ var PEOPLE = [ { d: 0, shirt: '#2C55FB', hair: '#2B2118', skin: '#F1C7A3', br: 4, hp: 6, cul: 1.6 }, { d: 1, shirt: '#1929DD', hair: '#D9A953', skin: '#F3CDAE', br: 3, hp: 12 }, { d: 2, shirt: '#91B1FF', hair: '#B65A2F', skin: '#F4CFB2', br: 3, hp: 4, cul: 7.6 }, { d: 3, shirt: '#F28B74', hair: '#1E1E24', skin: '#A86E48', br: 4, hp: 6, rock: true }, { d: 4, shirt: '#14B8A6', hair: '#6B4A35', skin: '#C68A5E', br: 4, hp: 12, segs: [[4.4, 7.0, [[365, 380], [450, 366], [472, 330], [472, 250], [428, 198]], 0, -58], [7.0, 9.4, [428, 198], -58], [9.4, 11.8, [[428, 198], [472, 250], [472, 330], [450, 366], [365, 380]], -58, 0]] }, { d: 5, shirt: '#232B5E', hair: '#3A2A20', skin: '#8D5A3B', br: 3, hp: 6, drink: true, segs: [[0.4, 2.6, [[580, 380], [668, 364], [684, 320], [690, 200], [712, 118]], 0, 90], [2.6, 4.8, [712, 118], 90], [4.8, 7.0, [[712, 118], [690, 200], [684, 320], [668, 364], [580, 380]], 90, 0]] } ]; var chairLayer = el('g', {}), shadowLayer = el('g', {}), layer = el('g', {}); PEOPLE.forEach(function (p, i) { p.seat = [DESKS[p.d][0], DESKS[p.d][1] + 92]; p.ph = i * 1.7; var c = p.chair = el('g', {}, chairLayer); el('rect', { x: -26, y: -8, width: 58, height: 52, rx: 15, fill: SHADOW, opacity: 0.1, filter: url('soft') }, c); el('rect', { x: -28, y: -17, width: 56, height: 48, rx: 14, fill: '#C9D6FF' }, c); el('rect', { x: -22, y: -11, width: 44, height: 36, rx: 11, fill: '#D6E0FF' }, c); el('rect', { x: -30, y: 27, width: 60, height: 14, rx: 7, fill: '#7E9EF5' }, c); el('rect', { x: -30, y: 24, width: 60, height: 13, rx: 6.5, fill: '#91B1FF' }, c); p.shadow = el('ellipse', { rx: 30, ry: 18, fill: SHADOW, opacity: 0.1, filter: url('soft') }, shadowLayer); var g = p.g = el('g', {}, layer); p.shoes = el('g', { fill: '#2B2F45' }, g); p.shoeL = el('ellipse', { cx: -8, cy: 0, rx: 4.5, ry: 7 }, p.shoes); p.shoeR = el('ellipse', { cx: 8, cy: 0, rx: 4.5, ry: 7 }, p.shoes); p.arms = [0, 1].map(function () { return { line: el('line', { stroke: p.shirt, 'stroke-width': 9, 'stroke-linecap': 'round' }, g), hand: el('circle', { r: 4.6, fill: p.skin }, g) }; }); p.body = el('rect', { x: -24, y: -10, width: 48, height: 20, rx: 10, fill: p.shirt }, g); el('rect', { x: -20, y: -9, width: 40, height: 6, rx: 3, fill: '#fff', opacity: 0.14 }, g); p.head = el('g', {}, g); el('circle', { cx: 0, cy: -1, r: 12, fill: p.skin }, p.head); el('circle', { cx: 0, cy: 2.6, r: 11.6, fill: p.hair }, p.head); el('ellipse', { cx: -3, cy: 1, rx: 4, ry: 2.6, fill: '#fff', opacity: 0.16 }, p.head); if (p.drink) { p.mug = el('g', {}, g); el('circle', { cx: 0, cy: 0, r: 4.8, fill: '#fff', stroke: '#E2C9A6', 'stroke-width': 1 }, p.mug); el('circle', { cx: 0, cy: 0, r: 2.8, fill: '#8B5A3C' }, p.mug); } }); function along(pts, u) { var L = [0], i; for (i = 1; lt(i, pts.length); i++) L.push(L[i - 1] + Math.hypot(pts[i][0] - pts[i - 1][0], pts[i][1] - pts[i - 1][1])); var s = cl(u) * L[L.length - 1]; for (i = 1; (lt(i, pts.length - 1) ? lt(L[i], s) : false); i++); var k = (s - L[i - 1]) \/ ((L[i] - L[i - 1]) || 1); return [mix(pts[i - 1][0], pts[i][0], k), mix(pts[i - 1][1], pts[i][1], k), L[L.length - 1]]; } function locate(p, T) { var segs = p.segs || []; for (var j = 0; lt(j, segs.length); j++) { var s = segs[j]; if (lt(T, s[0]) || !lt(T, s[1])) continue; if (typeof s[2][0] === 'number') return { x: s[2][0], y: s[2][1], h: s[3], wait: s }; var u = ease((T - s[0]) \/ (s[1] - s[0])), q = along(s[2], u), dl = 14 \/ q[2]; var a = along(s[2], u - dl), b = along(s[2], u + dl); var h = Math.atan2(b[0] - a[0], -(b[1] - a[1])) * 180 \/ Math.PI; h = angLerp(s[3], h, ease((T - s[0]) \/ 0.35)); h = angLerp(s[4], h, ease((s[1] - T) \/ 0.35)); return { x: q[0], y: q[1], h: h }; } return { x: p.seat[0], y: p.seat[1], h: 0 }; } \/* ---------- pirate bubbles (placed in the free aisle, tail up to the person) ---------- *\/ var C = [60, 70], R = 52, bubbles = []; function flagPath(T) { var top = [], bot = []; for (var i = 0; !lt(8, i); i++) { var x = -32 + i * 9, w = 3.2 * (i \/ 8) * Math.sin(TAU * (T - i \/ 8 * 0.9)); top.push(x.toFixed(1) + ',' + (-32 + w).toFixed(1)); bot.unshift(x.toFixed(1) + ',' + (16 + w).toFixed(1)); } return 'M' + top.join(' L') + ' L' + bot.join(' L') + 'Z'; } var bubbleLayer = el('g', {}); PEOPLE.forEach(function (p) { if (p.cul == null) return; var g = el('g', { opacity: 0 }, bubbleLayer); var ring = el('circle', { cx: C[0], cy: C[1], r: R, fill: 'none', stroke: '#F5A524', 'stroke-width': 5 }, g); var tail = 'M20,47 Q10,18 0,0 Q24,8 44,27 Z'; var out = el('g', { fill: '#141B3D', stroke: '#141B3D', 'stroke-width': 7, 'stroke-linejoin': 'round', filter: url('sh') }, g); el('circle', { cx: C[0], cy: C[1], r: R }, out); el('path', { d: tail }, out); el('circle', { cx: C[0], cy: C[1], r: R, fill: '#fff' }, g); el('path', { d: tail, fill: '#fff' }, g); var f = el('g', { transform: 'translate(' + (C[0] - 1) + ' ' + (C[1] + 3) + ') scale(0.88)' }, g); el('rect', { x: -38, y: -38, width: 5, height: 78, rx: 2.5, fill: '#141B3D' }, f); el('circle', { cx: -35.5, cy: -40, r: 5.5, fill: '#F5A524' }, f); var flag = el('path', { fill: '#16171D', stroke: '#16171D', 'stroke-width': 4, 'stroke-linejoin': 'round' }, f); var skull = el('g', {}, f); var bones = el('g', { stroke: '#fff', 'stroke-width': 4.6, 'stroke-linecap': 'round' }, skull); [[-17, -12, 17, 16], [17, -12, -17, 16]].forEach(function (b) { el('line', { x1: b[0], y1: b[1], x2: b[2], y2: b[3] }, bones); var dx = b[2] - b[0], dy = b[3] - b[1], n = Math.hypot(dx, dy), px = -dy \/ n * 2.7, py = dx \/ n * 2.7; [[b[0], b[1]], [b[2], b[3]]].forEach(function (e) { el('circle', { cx: e[0] + px, cy: e[1] + py, r: 3.3, fill: '#fff', stroke: 'none' }, bones); el('circle', { cx: e[0] - px, cy: e[1] - py, r: 3.3, fill: '#fff', stroke: 'none' }, bones); }); }); el('circle', { cx: 0, cy: -4, r: 12.5, fill: '#fff' }, skull); el('rect', { x: -7, y: 3, width: 14, height: 9, rx: 3, fill: '#fff' }, skull); el('circle', { cx: -4.8, cy: -3.5, r: 3.9, fill: '#16171D' }, skull); el('circle', { cx: 4.8, cy: -3.5, r: 3.9, fill: '#16171D' }, skull); el('path', { d: 'M0,2 l-1.9,3.2 h3.8z', fill: '#16171D' }, skull); el('path', { d: 'M-2.4,8.5 v3 M2.4,8.5 v3', stroke: '#16171D', 'stroke-width': 1.4, 'stroke-linecap': 'round' }, skull); bubbles.push({ p: p, g: g, ring: ring, flag: flag, skull: skull }); }); \/* ---------- render: pure function of T in [0, 12) ---------- *\/ var SCR = [168, 193, 255], AMB = [245, 165, 36], WHITE = [255, 255, 255], NAVY = [35, 43, 94]; function render(T) { var phi = TAU * T; tr(minute, 'rotate(' + (360 * T \/ LOOP) + ' 257 31)'); plants.forEach(function (pl) { tr(pl.g, 'translate(' + pl.x + ' ' + pl.y + ') rotate(' + (3 * Math.sin(TAU * T \/ 6 + pl.ph)) + ')'); }); lampGlow.setAttribute('opacity', (0.85 + 0.15 * Math.sin(TAU * T \/ 4)).toFixed(3)); steam.forEach(function (s, j) { var u = frac(T \/ 2 + j \/ 3); s.setAttribute('cx', (764 + 3 * Math.sin(TAU * (u + j \/ 3))).toFixed(2)); s.setAttribute('cy', (110 - 24 * u).toFixed(2)); s.setAttribute('r', (2.5 + 3 * u).toFixed(2)); s.setAttribute('opacity', (0.6 * Math.sin(Math.PI * u)).toFixed(3)); }); screens.forEach(function (s, i) { var p = PEOPLE[i], tint = 0; if (p.cul != null) { var k = T - p.cul; tint = Math.min(ease((k + 0.5) \/ 0.35), 1 - ease((k - 2.6) \/ 0.5)); } var c = mixC(SCR, AMB, tint); s.scr.setAttribute('fill', c); s.glow.setAttribute('fill', c); s.glow.setAttribute('opacity', (0.5 + 0.12 * Math.sin(TAU * T \/ 3 + i) + 0.25 * tint).toFixed(3)); s.lines.setAttribute('fill', mixC(WHITE, NAVY, tint)); s.lines.setAttribute('opacity', (0.7 - 0.15 * tint).toFixed(3)); tr(s.linesIn, 'translate(0 ' + (-20 * frac(T \/ 3 + i * 0.37)).toFixed(2) + ')'); }); PEOPLE.forEach(function (p) { var L = locate(p, T), a = locate(p, (T + 0.05) % LOOP), b = locate(p, (T - 0.05 + LOOP) % LOOP); var m = cl(Math.hypot(a.x - b.x, a.y - b.y) \/ 7); var s = cl(1 - Math.hypot(L.x - p.seat[0], L.y - p.seat[1]) \/ 22); var rock = p.rock ? 4 * Math.sin(TAU * T \/ 3) : 0, back = p.rock ? 2 + 2 * Math.sin(TAU * T \/ 3 - 1) : 0; var sway = 4 * m * Math.sin(phi); tr(p.chair, 'translate(' + p.seat[0] + ' ' + (p.seat[1] + 26 * (1 - s) + back).toFixed(2) + ') rotate(' + (rock + 10 * (1 - s)).toFixed(2) + ')'); var x = L.x, y = L.y + (p.rock ? back : 0), h = L.h + sway + rock; p.shadow.setAttribute('cx', (x + 4).toFixed(2)); p.shadow.setAttribute('cy', (y + 7).toFixed(2)); tr(p.g, 'translate(' + x.toFixed(2) + ' ' + y.toFixed(2) + ') rotate(' + h.toFixed(2) + ') scale(1.15)'); p.shoes.setAttribute('opacity', (1 - s).toFixed(3)); p.shoeL.setAttribute('cy', (-9 * Math.sin(phi) * m).toFixed(2)); p.shoeR.setAttribute('cy', (9 * Math.sin(phi) * m).toFixed(2)); var typing = 1.2 * Math.sin(TAU * T * 2.5 + p.ph); var hold = (p.drink ? L.wait : 0) ? Math.min(ease((T - L.wait[0]) \/ 0.3), ease((L.wait[1] - T) \/ 0.3)) : 0; p.arms.forEach(function (arm, j) { var sg = j ? 1 : -1; var seatedL = p.rock ? 20 : 32 + typing * sg; var l = mix(3 + sg * 9 * Math.sin(phi) * m, seatedL, s), th = (12 * sg * s) * Math.PI \/ 180; var sx = mix(23, 19, s) * sg, hx = sx - l * Math.sin(th), hy = -2 - l * Math.cos(th); if (p.drink ? (sg === 1 ? lt(0, hold) : false) : false) { var sip = Math.pow(0.5 - 0.5 * Math.cos(TAU * T \/ 2), 3); hx = mix(hx, mix(17, 5, sip), hold); hy = mix(hy, mix(-14, -17, sip), hold); tr(p.mug, 'translate(' + (hx + 2).toFixed(2) + ' ' + (hy - 3).toFixed(2) + ')'); } arm.line.setAttribute('x1', sx); arm.line.setAttribute('y1', -2); arm.line.setAttribute('x2', hx.toFixed(2)); arm.line.setAttribute('y2', hy.toFixed(2)); arm.hand.setAttribute('cx', hx.toFixed(2)); arm.hand.setAttribute('cy', hy.toFixed(2)); }); if (p.drink) { p.mug.setAttribute('opacity', hold.toFixed(3)); counterMug.setAttribute('opacity', (1 - hold).toFixed(3)); } tr(p.body, 'scale(' + (1 + 0.03 * s * Math.sin(TAU * T \/ p.br + p.ph)).toFixed(4) + ')'); var head = s * 7 * Math.sin(TAU * T \/ p.hp + p.ph); if (p.d === 1) { var k = T - 7.0; head += 70 * ease(k \/ 0.5) * (1 - ease((k - 2.0) \/ 0.5)); } tr(p.head, 'rotate(' + head.toFixed(2) + ')'); }); bubbles.forEach(function (bb) { var k = T - bb.p.cul; if (lt(k, 0) || lt(2.9, k)) { bb.g.setAttribute('opacity', 0); return; } var out = ease((k - 2.4) \/ 0.45), sc = backOut(k \/ 0.5) * (1 - 0.06 * out); var ax = bb.p.seat[0] + 16, ay = bb.p.seat[1] + 14 + 6 * out; tr(bb.g, 'translate(' + ax + ' ' + ay.toFixed(2) + ') scale(' + Math.max(sc, 0.001).toFixed(4) + ')'); bb.g.setAttribute('opacity', (cl(k \/ 0.12) * (1 - out)).toFixed(3)); var u = cl((k - 0.15) \/ 0.7); bb.ring.setAttribute('r', (R + 22 * ease(u)).toFixed(2)); bb.ring.setAttribute('opacity', (lt(0, u) ? (lt(u, 1) ? 0.75 * (1 - u) : 0) : 0).toFixed(3)); bb.flag.setAttribute('d', flagPath(T)); tr(bb.skull, 'translate(4 ' + (-8 + 1.6 * Math.sin(TAU * (T - 0.45))).toFixed(2) + ')'); }); } if (window.matchMedia ? window.matchMedia('(prefers-reduced-motion: reduce)').matches : false) { render(2.8); return; } (function frame(now) { var f = root.getAttribute('data-t'); render(f ? +f % LOOP : (now \/ 1000) % LOOP); requestAnimationFrame(frame); })(performance.now()); })(); <\/script> <\/div>\n<h2>What is Shadow AI?<\/h2>\n<p>The term comes from &#8220;Shadow IT&#8221;, the software employees install without going through the IT department. Shadow AI is its AI version: the use of artificial intelligence tools outside what the company has approved and knows how to manage.<\/p>\n<p>A few examples, drawn from ordinary situations:<\/p>\n<ul>\n<li>a lawyer pastes a contract clause into her personal ChatGPT account to reword it<\/li>\n<li>an HR manager has a free chatbot summarise annual appraisals<\/li>\n<li>a sales rep installs a browser extension that drafts his emails, and therefore reads every email he opens<\/li>\n<li>a new employee invites to Teams meetings the recording bot she used in her previous job<\/li>\n<\/ul>\n<p>The tool is not the problem, the framework around its use is. The same lawyer can make exactly the same request in a company tool, under contract, with data processed and stored in Switzerland or the European Union: that is managed use.<\/p>\n<p>With Shadow IT, the company lost control of a piece of software. With Shadow AI, it loses control of its data: every request to an external tool takes with it the text, file or conversation entrusted to it.<\/p>\n<h2>Why it happens<\/h2>\n<p>Nobody does Shadow AI out of a taste for risk. The reasons are almost always the same.<\/p>\n<p><strong>The time saving is real.<\/strong> ChatGPT has existed for almost four years. Since then, the models have improved a great deal, and their &#8220;harnesses&#8221; even more: the environment around them that gives them access to your files, to the internet, to pre-packaged capabilities (the &#8220;skills&#8221;) or to agents that chain tasks together on their own. Used well, these tools save a lot of time. When the gain is that clear, people accept a risk they do not always measure.<\/p>\n<p><strong>There are no rules.<\/strong> In the Qualinsight study, nearly one employee in two in French-speaking Switzerland says their organisation has no clear rules on AI. Without instructions, everyone sets their own limits.<\/p>\n<p><strong>There is no tool, or not the right one.<\/strong> In a survey carried out for Microsoft in the United Kingdom among 2,000 employees, 71% say they have already used unapproved consumer AI tools. Their top two reasons: habits formed in private life (41%) and the lack of a tool provided by the employer (28%).<\/p>\n<p>These figures come from the UK. We are building the Swiss equivalent: take one minute to answer our anonymous survey, open until the end of December.<\/p>\n<p class=\"cta-enquete\" style=\"margin:18px 0 4px\"><a class=\"btn btn-primary\" href=\"https:\/\/www.prismia.ch\/survey\/?lang=en&amp;src=a2en\" style=\"color:#fff;text-align:left\">Take the survey <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M5 12h14M13 6l6 6-6 6\"\/><\/svg><\/a><\/p>\n<h3>The Microsoft Copilot case<\/h3>\n<p>Many companies have chosen Microsoft 365 Copilot to give their teams AI built into their work environment. The choice is consistent. Yet a few months after deployment, some employees keep working in ChatGPT or Claude with a personal account. In our assignments, three reasons come up:<\/p>\n<ul>\n<li>the uses are not quite the same: each tool has its own functions, and habits formed elsewhere do not carry over with one click<\/li>\n<li>some advanced functions, such as Copilot Cowork, which works directly on your files, are billed by usage and often not activated (we explain this billing model in <a href=\"https:\/\/www.prismia.ch\/en\/understanding-microsoft-copilot-cowork-cost\/\">our article on the cost of Copilot Cowork<\/a>)<\/li>\n<li>above all, many employees think Microsoft Copilot is &#8220;less powerful&#8221;. Yet it relies on the same families of models as its competitors: those of OpenAI and, for some functions, those of Anthropic<\/li>\n<\/ul>\n<p>That last point says a lot about Shadow AI: people often work around the official tool out of unfamiliarity, not ill will. And unfamiliarity is addressed through training.<\/p>\n<h2>What management does not see<\/h2>\n<p>Management and teams do not look at AI from the same place. In an Accenture survey carried out at the end of 2025 among nearly 2,000 executives and employees in Europe, 94% of executives consider their teams&#8217; basic training sufficient. Only 27% of employees share that view. And according to the KPMG and University of Melbourne study published in 2025, more than half of Swiss users admit having already used AI against their company&#8217;s rules, for example by uploading sensitive data into free tools.<\/p>\n<p>In training sessions, we see it at every round of introductions: what people declare at the start of the day is far from what they say at the end.<\/p>\n<p>In Switzerland, 86% of employees use AI at work according to EY&#8217;s European barometer (2025, 500 Swiss employees surveyed). Among the cybersecurity leaders surveyed by Gartner in 2025, 69% suspect or have evidence that employees are using prohibited AI tools. And among the 600 organisations that suffered a data breach studied by IBM the same year, one in five attributes it to Shadow AI.<\/p>\n<h2>The risks, in order of priority<\/h2>\n<p>Not all uses are equal. Rewording a text meant for the public with ChatGPT is not a problem. Pasting a client file into it is. Here are the risks to look at first.<\/p>\n<div class=\"pia-risk\">\n<style> .pia-risk{--pr-p:#1929DD;--pr-a:#2C55FB;--pr-lav:#91B1FF;--pr-pale:#F7F9FF;--pr-pale2:#EEF1FF;--pr-border:#E4E9F7;--pr-ink:#0A0F2E;--pr-muted:#4E5A85;--pr-faint:#8B95BC;--pr-mono:\"Geist Mono\",ui-monospace,\"Cascadia Code\",Consolas,monospace;--pr-ease:cubic-bezier(.2,.7,.3,1);--pr-sh-sm:0 2px 10px rgba(10,18,64,.06);--pr-sh-hover:0 18px 44px rgba(25,41,221,.14);--pr-sh-cta:0 10px 28px rgba(25,41,221,.28);--pr-crit:#E5484D;--pr-high:#F5A524;--pr-mod:#E8C547;container-type:inline-size;font-family:inherit;font-size:17px;line-height:1.5;color:var(--pr-ink);margin:30px 0;} .pia-risk *,.pia-risk *::before,.pia-risk *::after{box-sizing:border-box;} .pia-risk .pia-risk__tag{font-family:var(--pr-mono);font-size:11px;font-weight:400;line-height:1.5;letter-spacing:.12em;text-transform:uppercase;color:var(--pr-faint);} .pia-risk .pia-risk__bar{display:none;margin:0 0 18px;} .pia-risk.is-js .pia-risk__bar{display:block;} .pia-risk .pia-risk__pills{position:relative;display:flex;flex-wrap:wrap;gap:8px;} .pia-risk .pia-risk__glider{position:absolute;left:0;top:0;width:0;height:0;border-radius:999px;background:var(--pr-p);box-shadow:0 6px 16px rgba(25,41,221,.18);pointer-events:none;z-index:0;} .pia-risk .pia-risk__glider.is-ready{transition:transform .45s var(--pr-ease),width .45s var(--pr-ease),height .45s var(--pr-ease);} .pia-risk button.pia-risk__pill{position:relative;z-index:1;font:inherit;font-size:14px;font-weight:600;line-height:1.2;letter-spacing:0;text-transform:none;margin:0;padding:9px 16px;border:1px solid var(--pr-border);border-radius:999px;background:transparent;color:var(--pr-ink);cursor:pointer;box-shadow:none;transition:color .3s var(--pr-ease),border-color .3s var(--pr-ease),background-color .3s var(--pr-ease);} .pia-risk button.pia-risk__pill:hover,.pia-risk button.pia-risk__pill:focus{background:var(--pr-pale);border-color:var(--pr-lav);color:var(--pr-p);outline:none;} .pia-risk button.pia-risk__pill:focus-visible{outline:2px solid var(--pr-a);outline-offset:2px;} .pia-risk button.pia-risk__pill[aria-pressed=\"true\"],.pia-risk button.pia-risk__pill[aria-pressed=\"true\"]:hover,.pia-risk button.pia-risk__pill[aria-pressed=\"true\"]:focus{background:transparent;border-color:transparent;color:#fff;} .pia-risk .pia-risk__meta{display:flex;flex-wrap:wrap;align-items:baseline;justify-content:space-between;gap:4px 16px;margin:12px 0 0;} .pia-risk .pia-risk__note{font-size:13px;line-height:1.5;color:var(--pr-muted);margin:0;} .pia-risk .pia-risk__count{font-variant-numeric:tabular-nums;color:var(--pr-muted);} .pia-risk .pia-risk__head{display:grid;grid-template-columns:7rem minmax(0,1fr) minmax(12rem,.8fr);gap:20px;padding:0 20px 8px;} .pia-risk ul.pia-risk__list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:10px;} .pia-risk li.pia-risk__item{--pr-c:var(--pr-crit);display:grid;grid-template-columns:7rem minmax(0,1fr) minmax(12rem,.8fr);gap:20px;align-items:start;margin:0;padding:18px 20px;background:#fff;border:1px solid var(--pr-border);border-radius:10px;box-shadow:none;position:relative;transition:opacity .4s var(--pr-ease),transform .5s var(--pr-ease),border-color .3s var(--pr-ease),box-shadow .3s var(--pr-ease);} .pia-risk li.pia-risk__item::marker{content:none;} .pia-risk li.pia-risk__item:hover{transform:translateY(-2px);border-color:var(--pr-lav);box-shadow:var(--pr-sh-sm);} .pia-risk li.pia-risk__item.is-out{opacity:0;transform:translateY(12px);} .pia-risk li.pia-risk__item[hidden]{display:none;} .pia-risk .pia-risk__item[data-level=\"e\"]{--pr-c:var(--pr-high);} .pia-risk .pia-risk__item[data-level=\"m\"]{--pr-c:var(--pr-mod);} .pia-risk .pia-risk__badge{display:inline-flex;align-items:center;gap:10px;font-size:13.5px;font-weight:600;line-height:1;color:var(--pr-ink);white-space:nowrap;padding-top:3px;} .pia-risk .pia-risk__gauge{display:inline-flex;align-items:flex-end;gap:3px;height:16px;flex:none;} .pia-risk .pia-risk__gauge i{display:block;width:5px;border-radius:1.5px;background:var(--pr-border);transition:background-color .35s var(--pr-ease),transform .35s var(--pr-ease);transform-origin:bottom;} .pia-risk .pia-risk__gauge i:nth-child(1){height:7px;} .pia-risk .pia-risk__gauge i:nth-child(2){height:11px;transition-delay:.07s;--pr-bd:.2s;} .pia-risk .pia-risk__gauge i:nth-child(3){height:16px;transition-delay:.14s;--pr-bd:.4s;} .pia-risk .pia-risk__item[data-level=\"c\"] .pia-risk__gauge i,.pia-risk .pia-risk__item[data-level=\"e\"] .pia-risk__gauge i:nth-child(-n+2),.pia-risk .pia-risk__item[data-level=\"m\"] .pia-risk__gauge i:nth-child(1){background:var(--pr-c);animation:pia-risk-breathe 2.4s ease-in-out infinite;animation-delay:calc(var(--pr-d,0s) + var(--pr-bd,0s));} .pia-risk .pia-risk__item[data-level=\"c\"] .pia-risk__gauge i:nth-child(3){animation-name:pia-risk-pulse;} .pia-risk .pia-risk__item{--pr-lo:.55;--pr-sy:.85;} .pia-risk .pia-risk__item[data-level=\"c\"]{--pr-lo:.45;--pr-sy:.8;} .pia-risk .pia-risk__item[data-level=\"m\"]{--pr-lo:.85;--pr-sy:.97;} .pia-risk .pia-risk__item.is-off .pia-risk__gauge i{animation-play-state:paused;} @keyframes pia-risk-breathe{50%{opacity:var(--pr-lo);transform:scaleY(var(--pr-sy));}} @keyframes pia-risk-pulse{0%{box-shadow:0 0 0 0 color-mix(in srgb,var(--pr-crit) 50%,transparent);}50%{opacity:var(--pr-lo);transform:scaleY(var(--pr-sy));}80%,100%{box-shadow:0 0 0 6px color-mix(in srgb,var(--pr-crit) 0%,transparent);}} .pia-risk .pia-risk__lvl.is-bump{animation:pia-risk-swap .45s var(--pr-ease);} @keyframes pia-risk-swap{0%{opacity:0;transform:translateY(4px);}} .pia-risk .pia-risk__lvl{display:inline-block;} .pia-risk p.pia-risk__name{margin:0 0 4px;font-size:17px;font-weight:700;line-height:1.4;color:var(--pr-ink);} .pia-risk p.pia-risk__ex{margin:0;font-size:15.5px;line-height:1.55;color:var(--pr-muted);} .pia-risk .pia-risk__fixlabel{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;} .pia-risk ul.pia-risk__tags{list-style:none;margin:0;padding:0;display:flex;flex-wrap:wrap;gap:6px;} .pia-risk ul.pia-risk__tags li{margin:0;padding:4px 8px;font-size:13px;font-weight:500;line-height:1.35;color:var(--pr-p);background:var(--pr-pale2);border:0;border-radius:4px;} .pia-risk ul.pia-risk__tags li::before,.pia-risk ul.pia-risk__tags li::marker{content:none;} @container (max-width:640px){ .pia-risk .pia-risk__head{display:none;} .pia-risk li.pia-risk__item{grid-template-columns:minmax(0,1fr);gap:12px;padding:16px;} .pia-risk .pia-risk__fixlabel{position:static;width:auto;height:auto;clip:auto;display:block;margin:0 0 6px;} .pia-risk .pia-risk__pills{gap:6px;} .pia-risk button.pia-risk__pill{font-size:13px;padding:7px 12px;} } @media (prefers-reduced-motion:reduce){ .pia-risk *,.pia-risk *::before{transition:none !important;transition-delay:0s !important;animation:none !important;} .pia-risk li.pia-risk__item:hover,.pia-risk li.pia-risk__item.is-out{transform:none;} } <\/style>\n<div class=\"pia-risk__bar\">\n<div class=\"pia-risk__pills\" role=\"group\" aria-label=\"Filter risks by sector\"><span class=\"pia-risk__glider\" aria-hidden=\"true\"><\/span><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"all\" aria-pressed=\"true\">All<\/button><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"services\" aria-pressed=\"false\">Services &amp; consulting<\/button><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"fiduciaires\" aria-pressed=\"false\">Fiduciaries, lawyers, healthcare<\/button><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"industrie\" aria-pressed=\"false\">Industry &amp; R&amp;D<\/button><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"public\" aria-pressed=\"false\">Public sector<\/button><button type=\"button\" class=\"pia-risk__pill\" data-filter=\"tech\" aria-pressed=\"false\">Tech teams<\/button><\/div>\n<div class=\"pia-risk__meta\">\n<p class=\"pia-risk__note\">Priorities assessed by PrismIA by sector<\/p>\n<p><span class=\"pia-risk__count pia-risk__tag\" aria-live=\"polite\">11 risks<\/span><\/div>\n<\/div>\n<div class=\"pia-risk__head\" aria-hidden=\"true\"><span class=\"pia-risk__tag\">Priority<\/span><span class=\"pia-risk__tag\">Risk and example<\/span><span class=\"pia-risk__tag\">What reduces it<\/span><\/div>\n<ul class=\"pia-risk__list\">\n<li class=\"pia-risk__item\" data-level=\"c\" data-prio-services=\"c\" data-prio-fiduciaires=\"c\" data-prio-industrie=\"c\" data-prio-public=\"c\" data-prio-tech=\"c\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">Critical<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Leak of personal or confidential data<\/p>\n<p class=\"pia-risk__ex\">An HR file or a client contract pasted into a free tool whose terms allow the data to be reused.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>AI policy<\/li>\n<li>Approved tools<\/li>\n<li>AI gateway<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"c\" data-prio-services=\"c\" data-prio-fiduciaires=\"c\" data-prio-industrie=\"e\" data-prio-public=\"c\" data-prio-tech=\"e\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">Critical<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Non-compliance with the FADP (Swiss data protection law)<\/p>\n<p class=\"pia-risk__ex\">Client data sent to a service hosted outside Switzerland without contractual safeguards.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Governance<\/li>\n<li>Supplier contracts<\/li>\n<li>Controlled hosting<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"c\" data-prio-services=\"e\" data-prio-fiduciaires=\"c\" data-prio-industrie=\"c\" data-prio-public=\"e\" data-prio-tech=\"x\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">Critical<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Breach of professional or business secrecy<\/p>\n<p class=\"pia-risk__ex\">A patient or client file, or a manufacturing process, handed to an external tool.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Rules by data type<\/li>\n<li>Internally hosted models<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"e\" data-prio-fiduciaires=\"e\" data-prio-industrie=\"e\" data-prio-public=\"e\" data-prio-tech=\"c\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Prompt injection<\/p>\n<p class=\"pia-risk__ex\">An email or a document contains hidden instructions that the AI assistant carries out without the user knowing.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>AI gateway<\/li>\n<li>Limited agent permissions<\/li>\n<li>Training<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"e\" data-prio-fiduciaires=\"e\" data-prio-industrie=\"e\" data-prio-public=\"e\" data-prio-tech=\"e\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Malicious AI extensions and apps<\/p>\n<p class=\"pia-risk__ex\">An \u201cAI assistant\u201d extension that siphons off conversations and visited pages.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Catalogue of approved tools<\/li>\n<li>Device management<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"e\" data-prio-fiduciaires=\"m\" data-prio-industrie=\"e\" data-prio-public=\"m\" data-prio-tech=\"c\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Unvetted agents, skills and connectors<\/p>\n<p class=\"pia-risk__ex\">A connector installed on one&#8217;s own that gives an agent access to email or files.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Tool catalogue<\/li>\n<li>Limited permissions<\/li>\n<li>AI gateway<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"e\" data-prio-fiduciaires=\"e\" data-prio-industrie=\"e\" data-prio-public=\"e\" data-prio-tech=\"e\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Personal accounts outside any control<\/p>\n<p class=\"pia-risk__ex\">No company sign-in, conversations shared via public links, data that leaves with the employee.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Company accounts<\/li>\n<li>SSO<\/li>\n<li>AI policy<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"e\" data-prio-fiduciaires=\"e\" data-prio-industrie=\"x\" data-prio-public=\"e\" data-prio-tech=\"x\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Meetings recorded without participants knowing<\/p>\n<p class=\"pia-risk__ex\">A note-taking bot invited without the others knowing, clients included.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>List of approved tools<\/li>\n<li>Informing participants<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"e\" data-prio-services=\"x\" data-prio-fiduciaires=\"x\" data-prio-industrie=\"c\" data-prio-public=\"x\" data-prio-tech=\"c\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">High<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Leak of source code and intellectual property<\/p>\n<p class=\"pia-risk__ex\">Code or drawings pasted into a consumer assistant to be fixed.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Approved development tools<\/li>\n<li>AI gateway<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"m\" data-prio-services=\"e\" data-prio-fiduciaires=\"e\" data-prio-industrie=\"m\" data-prio-public=\"e\" data-prio-tech=\"m\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">Moderate<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Wrong answers reused without checking<\/p>\n<p class=\"pia-risk__ex\">A figure invented by the AI that ends up in a client proposal.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Training<\/li>\n<li>Review<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"pia-risk__item\" data-level=\"m\" data-prio-services=\"m\" data-prio-fiduciaires=\"m\" data-prio-industrie=\"m\" data-prio-public=\"m\" data-prio-tech=\"m\">\n<div class=\"pia-risk__prio\"><span class=\"pia-risk__badge\"><span class=\"pia-risk__gauge\" aria-hidden=\"true\"><i><\/i><i><\/i><i><\/i><\/span><span class=\"pia-risk__lvl\">Moderate<\/span><\/span><\/div>\n<div class=\"pia-risk__body\">\n<p class=\"pia-risk__name\">Hidden costs<\/p>\n<p class=\"pia-risk__ex\">Individual subscriptions paid out of pocket or on expenses, with no overall view.<\/p>\n<\/div>\n<div class=\"pia-risk__fix\"><span class=\"pia-risk__fixlabel pia-risk__tag\">What reduces it<\/span><\/p>\n<ul class=\"pia-risk__tags\">\n<li>Governance<\/li>\n<li>Centralised purchasing<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<\/ul>\n<p><script> (function () { var LABEL = { c: 'Critical', e: 'High', m: 'Moderate' }; var RANK = { c: 0, e: 1, m: 2, x: 3 }; function each(a, fn) { Array.prototype.forEach.call(a, fn); } each(document.querySelectorAll('.pia-risk'), function (root) { if (root.classList.contains('is-js')) { return; } root.classList.add('is-js'); var list = root.querySelector('.pia-risk__list'); var glider = root.querySelector('.pia-risk__glider'); var pills = root.querySelectorAll('.pia-risk__pill'); var count = root.querySelector('.pia-risk__count'); var items = Array.prototype.slice.call(root.querySelectorAll('.pia-risk__item')); var reduce = window.matchMedia('(prefers-reduced-motion: reduce)').matches; var gen = 0; var io = null; var active = pills[0]; items.forEach(function (it, i) { it.piaIndex = i; it.piaGeneral = it.getAttribute('data-level'); it.style.setProperty('--pr-d', (-((i * 0.83) % 2.4)).toFixed(2) + 's'); }); if ('IntersectionObserver' in window) { var vio = new IntersectionObserver(function (entries) { entries.forEach(function (e) { e.target.classList.toggle('is-off', !e.isIntersecting); }); }); items.forEach(function (it) { vio.observe(it); }); } function moveGlider() { glider.style.width = active.offsetWidth + 'px'; glider.style.height = active.offsetHeight + 'px'; glider.style.transform = 'translate(' + active.offsetLeft + 'px,' + active.offsetTop + 'px)'; } moveGlider(); setTimeout(function () { glider.classList.add('is-ready'); }, 60); if ('ResizeObserver' in window) { var ro = new ResizeObserver(moveGlider); each(pills, function (p) { ro.observe(p); }); } window.addEventListener('resize', moveGlider); function setLevel(it, l) { if (it.getAttribute('data-level') === l) { return; } it.setAttribute('data-level', l); it.querySelector('.pia-risk__lvl').textContent = LABEL[l]; var b = it.querySelector('.pia-risk__lvl'); b.classList.remove('is-bump'); void b.offsetWidth; b.classList.add('is-bump'); } function apply(f) { var g = ++gen; if (io) { io.disconnect(); io = null; } var plan = items.map(function (it) { return { it: it, lvl: f === 'all' ? it.piaGeneral : (it.getAttribute('data-prio-' + f) || it.piaGeneral) }; }); var n = plan.filter(function (p) { return p.lvl !== 'x'; }).length; count.textContent = n + ' risk' + (n > 1 ? 's' : ''); var leaving = plan.filter(function (p) { return p.lvl === 'x' ? !p.it.hidden : false; }); leaving.forEach(function (p) { p.it.style.transitionDelay = ''; p.it.classList.add('is-out'); }); setTimeout(function () { if (g !== gen) { return; } var first = {}; items.forEach(function (it) { if (!it.hidden) { first[it.piaIndex] = it.getBoundingClientRect().top; } }); plan.sort(function (a, b) { return (RANK[a.lvl] - RANK[b.lvl]) || (a.it.piaIndex - b.it.piaIndex); }); plan.forEach(function (p) { list.appendChild(p.it); if (p.lvl === 'x') { p.it.hidden = true; p.it.classList.add('is-out'); return; } setLevel(p.it, p.lvl); p.enter = p.it.hidden; if (p.enter) { p.it.hidden = false; p.it.classList.add('is-out'); } }); var k = 0; plan.forEach(function (p) { if (p.lvl === 'x' || reduce) { return; } if (p.enter) { p.it.style.transitionDelay = (80 + k++ * 50) + 'ms'; return; } var dy = first[p.it.piaIndex] - p.it.getBoundingClientRect().top; if (dy) { p.it.style.transition = 'none'; p.it.style.transform = 'translateY(' + dy + 'px)'; } }); void list.offsetHeight; plan.forEach(function (p) { p.it.style.transition = ''; p.it.style.transform = ''; if (p.lvl !== 'x') { p.it.classList.remove('is-out'); } }); setTimeout(function () { if (g !== gen) { return; } items.forEach(function (it) { it.style.transitionDelay = ''; }); }, 900); }, (leaving.length ? 220 : 0) * (reduce ? 0 : 1)); } each(pills, function (p) { p.addEventListener('click', function () { if (p === active) { return; } active = p; each(pills, function (q) { q.setAttribute('aria-pressed', q === p ? 'true' : 'false'); }); moveGlider(); apply(p.getAttribute('data-filter')); }); }); if (!reduce ? 'IntersectionObserver' in window : false) { items.forEach(function (it) { it.classList.add('is-out'); }); io = new IntersectionObserver(function (entries, obs) { var k = 0; entries.forEach(function (e) { if (!e.isIntersecting) { return; } var t = e.target; obs.unobserve(t); t.style.transitionDelay = (k++ * 80) + 'ms'; t.classList.remove('is-out'); setTimeout(function () { t.style.transitionDelay = ''; }, 1200); }); }, { rootMargin: '0px 0px -6% 0px', threshold: 0.15 }); items.forEach(function (it) { io.observe(it); }); } }); })(); <\/script><\/div>\n<p>On the legal side, the Swiss Federal Act on Data Protection (FADP, known in French as nLPD) does not ban AI. It governs what is done with personal data: its security, its transfer to processors, its transmission abroad. The Federal Data Protection and Information Commissioner (FDPIC) has been pointing out since 2023 that the law applies directly to processing carried out with AI. A Swiss particularity: the fines provided for, up to CHF 250,000, target first and foremost the person who acted intentionally, not the company. A well-meaning employee can therefore be exposed personally, and a manager who failed to prevent the offence can also be held liable. One more reason to give everyone a clear framework.<\/p>\n<h2>Ban it, ignore it or manage it<\/h2>\n<p><strong>Ban it.<\/strong> Blocking ChatGPT on the company network takes five minutes. The employee then takes out their phone. The usage does not disappear, it becomes invisible. In a Software AG survey of 6,000 employees in the United States, the United Kingdom and Germany, 46% say they would carry on even if it were banned.<\/p>\n<p><strong>Ignore it.<\/strong> Letting it happen means letting everyone decide alone what can leave the company, and letting the risks in the table build up unseen.<\/p>\n<p><strong>Manage it.<\/strong> This means acknowledging that the usage exists and brings something, then giving it a framework and tools. It is also the approach of the NCSC, the UK&#8217;s cybersecurity agency: understand why people turn to these tools, and seek to reduce the risk rather than eliminate it.<\/p>\n<p>A framework without tools, and people work around it because the gain is too strong. Tools without a framework, and you are no longer compliant. The two move forward together.<\/p>\n<h2>Managing it in practice: a framework and tools<\/h2>\n<p>Governance, policy, gateway, training, audit: these are the workstreams we carry out with our clients in our <a href=\"https:\/\/www.prismia.ch\/en\/audit-consulting\/\">AI consulting<\/a> assignments.<\/p>\n<h3>Governance: who decides what<\/h3>\n<p>Before the rules, you need to know who sets them and who keeps them alive. In a small or mid-sized company, a small team is enough: management, IT, a business representative and, if possible, someone who knows data law. It decides which tools are authorised and for which uses. And it reviews its choices regularly, because the tools change very fast.<\/p>\n<h3>The AI policy: short and readable<\/h3>\n<p>The policy translates these decisions for everyone. It answers three questions: which tools can I use, with which data, and what never leaves the company. Two pages that people read are worth more than twenty that nobody opens.<\/p>\n<h3>The AI gateway: a single entry point<\/h3>\n<p>This is the least familiar tool, and yet it solves a good part of the problem. An AI gateway sits between your employees and the AI models. All requests go through it, much as a company&#8217;s calls go through its switchboard.<\/p>\n<figure style=\"margin:36px 0\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-gateway.jpg\" alt=\"Illustration: requests from several workstations converge on an AI gateway, then go on to a secure internal server or to models in the cloud\" style=\"width:100%;height:auto;border-radius:14px\" width=\"1376\" height=\"768\" loading=\"lazy\"><\/figure>\n<p>What it allows:<\/p>\n<ul>\n<li><strong>routing each request to the right model<\/strong>: a question containing sensitive data goes to a model hosted by you or in Switzerland, a general search to a major market model<\/li>\n<li><strong>filtering personal data<\/strong> before it leaves<\/li>\n<li><strong>blocking some attacks<\/strong>, such as prompt injection, by spotting suspicious instructions before they reach the model<\/li>\n<li><strong>tracking usage and costs<\/strong>, by team, with quotas<\/li>\n<li><strong>switching models<\/strong> when a better one comes out, without changing users&#8217; habits<\/li>\n<\/ul>\n<p>The effect on Shadow AI is direct: teams have access to the best models, in a controlled setting, and the main reason to work around the rules disappears. A gateway still cannot see personal accounts used outside the company network. That is why it only works together with the policy and training. It is one of the topics we cover in our <a href=\"https:\/\/www.prismia.ch\/en\/integration\/\">integration<\/a> projects.<\/p>\n<p>For a one-off need, our free <a href=\"https:\/\/www.prismia.ch\/en\/local-pii-filter\/\">Anonymiser<\/a> removes personal data from a text directly in your browser, before you entrust it to an AI.<\/p>\n<h3>Training: what holds the rest together<\/h3>\n<p>The Microsoft Copilot example shows it: a good tool that is poorly mastered gets worked around. Training means explaining why certain data must not leave, and showing what the tools provided can do. In the Qualinsight study, 63% of trained people use AI every week, against 34% of the others: training does not hold back usage, it grows it within the right framework. Our <a href=\"https:\/\/www.prismia.ch\/en\/ai-training\/\">AI training<\/a> starts from the tools your teams already use every day.<\/p>\n<h3>Audit and integration: start from what exists<\/h3>\n<p>Before choosing tools, it is worth looking at what is already happening: which tools, for which tasks, with which data. An anonymous, no-sanction internal survey gives a truer picture than any network block. You then keep what works, replace what exposes you, and build the right tools into the teams&#8217; daily work.<\/p>\n<div class=\"callout\">\n<div class=\"dd-tag\">Step back before you speed up<\/div>\n<p>Choosing tools and writing rules is easier when you know where you are heading. With <strong>Journey to AI<\/strong>, in four to six weeks we take stock of how AI is used in your organisation and of your AI maturity, then build a prioritised roadmap with you. <a href=\"https:\/\/www.prismia.ch\/en\/audit-consulting\/journey-to-ai\/\">Discover Journey to AI<\/a><\/p>\n<\/div>\n<h2>Don&#8217;t overdo it<\/h2>\n<p>Managing does not mean monitoring every click. The aim is visibility: proportionate logging, rules that are understood, and an open door for questions. A team that can say &#8220;I used this tool, is that fine?&#8221; without fearing a reprimand no longer has a reason to hide its usage.<\/p>\n<p>Zero risk does not exist. The goal is for the approved tool to be good enough that nobody wants to do without it.<\/p>\n<h2>FAQ<\/h2>\n<div class=\"faq-wrap\">\n<details class=\"faq-item\">\n<summary>Is Shadow AI illegal in Switzerland? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">Using AI is not illegal. What can be illegal is sending personal data to it without complying with the FADP, for example to a foreign service without safeguards, or breaching professional secrecy.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>Should we ban ChatGPT at work? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">A ban on its own does not stop the usage, it makes it invisible. It is more effective to define what is allowed, provide an approved tool and train the teams.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>How do I know whether my employees are using AI without telling me? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">By asking them, in an anonymous survey with no sanctions. Network logging tools complete the picture, but they cannot see what happens outside the company network.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>Is Microsoft Copilot enough to solve the problem? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">It helps, if it comes with support. Without training, part of the team stays on its usual tools, often because it does not know what Microsoft Copilot can do.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>Who is responsible in case of a leak? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">Under the FADP, fines target first the person who acted intentionally, and a manager who failed to prevent the offence can also be held liable. The company remains exposed with regard to its clients and its reputation.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>Is an AI policy enough? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">No. A policy without tools gets worked around, tools without a policy get misused. Together with training, the two form a set-up that holds.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>What does an AI policy contain? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">Answers to three questions: which tools are authorised, with which data, and what must never leave the company. It also names the person to contact in case of doubt. Two readable pages are enough.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>What is an AI gateway? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">A single entry point between employees and AI models. It routes each request to the right model depending on how sensitive the data is, filters personal information and tracks usage and costs.<\/div>\n<\/details>\n<details class=\"faq-item\">\n<summary>What is prompt injection? <span class=\"faq-plus\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"faq-a\">An attack that consists of hiding instructions in content the AI is going to read, such as an email, a document or a web page. The assistant then carries them out without its user&#8217;s knowledge, for example by passing on information. The risk grows with agents that have access to email or files.<\/div>\n<\/details>\n<\/div>\n<div class=\"callout\">\n<div class=\"dd-tag\">Take action<\/div>\n<p>Take stock of how AI is used in your organisation: <a href=\"https:\/\/www.prismia.ch\/en\/audit-consulting\/\">audit and consulting<\/a> \u00b7 <a href=\"https:\/\/www.prismia.ch\/en\/ai-training\/\">AI training<\/a> \u00b7 <a href=\"https:\/\/www.prismia.ch\/en\/contact\/\">contact us<\/a>.<\/p>\n<\/div>\n<h2>Sources<\/h2>\n<ul>\n<li><a href=\"https:\/\/qualinsight.ch\/actualites\/ia-travail-suisse-romande-gouvernance-2026\/\" target=\"_blank\" rel=\"noopener\">Qualinsight \u00d7 SwissTranscript, &#8220;AI at work in French-speaking Switzerland 2026&#8221; (1,030 employees, fieldwork March 2026)<\/a><\/li>\n<li><a href=\"https:\/\/www.ey.com\/de_ch\/newsroom\/2025\/07\/almost-half-of-employees-fear-for-their-jobs-because-of-ai\" target=\"_blank\" rel=\"noopener\">EY, European AI Barometer 2025 (8 July 2025, including 500 Swiss employees)<\/a><\/li>\n<li><a href=\"https:\/\/www.cash.ch\/news\/top-news\/firmen-treiben-ki-voran-schweizer-belegschaft-fuhlt-sich-abgehangt-899061\" target=\"_blank\" rel=\"noopener\">Accenture, Pulse of Change (survey Nov.-Dec. 2025, about 1,070 executives and 900 employees in Europe), via AWP \/ cash.ch (15 January 2026)<\/a><\/li>\n<li><a href=\"https:\/\/www.netzwoche.ch\/news\/2025-05-05\/schweizer-angestellte-greifen-zunehmend-zur-ki-und-scheren-sich-wenig-um\" target=\"_blank\" rel=\"noopener\">KPMG and University of Melbourne, &#8220;Trust, attitudes and use of AI&#8221; (2025), Swiss results via Netzwoche (5 May 2025)<\/a><\/li>\n<li><a href=\"https:\/\/ukstories.microsoft.com\/features\/rise-in-shadow-ai-tools-raising-security-concerns-for-uk\/\" target=\"_blank\" rel=\"noopener\">Microsoft UK, &#8220;Rise in shadow AI tools raising security concerns for UK&#8221; (13 October 2025, 2,003 employees)<\/a><\/li>\n<li><a href=\"https:\/\/www.gartner.com\/en\/newsroom\/press-releases\/2025-11-19-gartner-identifies-critical-genai-blind-spots-that-cios-must-urgently-address0\" target=\"_blank\" rel=\"noopener\">Gartner, press release of 19 November 2025 (302 cybersecurity leaders)<\/a><\/li>\n<li><a href=\"https:\/\/newsroom.ibm.com\/2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls\" target=\"_blank\" rel=\"noopener\">IBM, Cost of a Data Breach 2025 (30 July 2025, 600 organisations)<\/a><\/li>\n<li><a href=\"https:\/\/unleash.ai\/artificial-intelligence\/half-of-workers-use-unauthorized-ai-at-work-and-dont-want-to-quit-software-ag\" target=\"_blank\" rel=\"noopener\">Software AG, survey on unauthorised AI (September 2024, 6,000 employees in the US, UK and Germany), via Unleash<\/a><\/li>\n<li><a href=\"https:\/\/www.ncsc.gov.uk\/blogs\/the-hidden-risks-of-shadow-ai\" target=\"_blank\" rel=\"noopener\">NCSC (United Kingdom), &#8220;The hidden risks of shadow AI&#8221; (7 September 2026)<\/a><\/li>\n<li><a href=\"https:\/\/www.fedlex.admin.ch\/eli\/cc\/2022\/491\/fr\" target=\"_blank\" rel=\"noopener\">Federal Act on Data Protection (FADP, nLPD), art. 8, 9, 16, 61 and 64<\/a><\/li>\n<li><a href=\"https:\/\/www.edoeb.admin.ch\/en\/09112023-current-data-protection-legislation-is-directly-applicable-to-ai\" target=\"_blank\" rel=\"noopener\">FDPIC, &#8220;Current data protection legislation is directly applicable to AI&#8221; (9 November 2023, updated 8 May 2025)<\/a><\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/api-management\/genai-gateway-capabilities\" target=\"_blank\" rel=\"noopener\">Microsoft Learn, &#8220;AI gateway capabilities in Azure API Management&#8221;<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Employees already use AI without telling their employer. Here is why it happens, which risks come first and how to manage it with a framework and the right tools.<\/p>\n","protected":false},"author":3,"featured_media":5032,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_linkdex":"","_yoast_wpseo_content_score":"","_elementor_version":"","_elementor_pro_version":"","_elementor_css":"","footnotes":""},"categories":[39],"tags":[],"class_list":["post-5186","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Shadow AI: ban it, ignore it or manage it? | PrismIA<\/title>\n<meta name=\"description\" content=\"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Shadow AI: ban it, ignore it or manage it? | PrismIA\" \/>\n<meta property=\"og:description\" content=\"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/\" \/>\n<meta property=\"og:site_name\" content=\"PrismIA\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-28T14:51:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-28T17:12:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u00c9quipe PrismIA\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u00c9quipe PrismIA\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/\"},\"author\":{\"name\":\"\u00c9quipe PrismIA\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#\\\/schema\\\/person\\\/f85b1d436a6b6ca8b1f0e2fe00112701\"},\"headline\":\"Shadow AI: ban it, ignore it or manage it?\",\"datePublished\":\"2026-10-28T14:51:38+00:00\",\"dateModified\":\"2026-10-28T17:12:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/\"},\"wordCount\":2879,\"publisher\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/a2-shadow-cover.jpg\",\"articleSection\":[\"Articles\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/\",\"url\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/\",\"name\":\"Shadow AI: ban it, ignore it or manage it? | PrismIA\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/a2-shadow-cover.jpg\",\"datePublished\":\"2026-10-28T14:51:38+00:00\",\"dateModified\":\"2026-10-28T17:12:20+00:00\",\"description\":\"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/a2-shadow-cover.jpg\",\"contentUrl\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/a2-shadow-cover.jpg\",\"width\":1024,\"height\":1024,\"caption\":\"Illustration : un open space vu de haut o\u00f9 deux \u00e9crans s'allument en orange, et des donn\u00e9es s'\u00e9chappent par la fen\u00eatre vers un nuage\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/shadow-ai-swiss-companies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shadow AI: ban it, ignore it or manage it?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/\",\"name\":\"PrismIA\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"ProfessionalService\"],\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#organization\",\"name\":\"PrismIA S\u00e0rl\",\"url\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/PIA_logo_415x90-e1739004471809.webp\",\"contentUrl\":\"https:\\\/\\\/www.prismia.ch\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/PIA_logo_415x90-e1739004471809.webp\",\"width\":200,\"height\":43,\"caption\":\"PrismIA S\u00e0rl\"},\"image\":{\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"description\":\"PrismIA est une agence d'intelligence artificielle bas\u00e9e \u00e0 Gen\u00e8ve. Nous accompagnons les PME et grandes entreprises suisses dans l'adoption responsable de l'IA : conseil strat\u00e9gique, formations sur mesure, audit et int\u00e9gration de solutions.\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Chemin Frank-Thomas 32\",\"postalCode\":\"1208\",\"addressLocality\":\"Gen\u00e8ve\",\"addressRegion\":\"GE\",\"addressCountry\":\"CH\"},\"telephone\":\"+41 22 566 94 00\",\"email\":\"info@prismia.ch\",\"geo\":{\"@type\":\"GeoCoordinates\",\"latitude\":46.203807649278424,\"longitude\":6.1732832963451445},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/prismia-ch\",\"https:\\\/\\\/www.wikidata.org\\\/wiki\\\/Q141779554\"],\"areaServed\":[{\"@type\":\"Country\",\"name\":\"Switzerland\"},{\"@type\":\"AdministrativeArea\",\"name\":\"Suisse romande\"},{\"@type\":\"AdministrativeArea\",\"name\":\"Vaud\"},{\"@type\":\"City\",\"name\":\"Gen\u00e8ve\"},{\"@type\":\"City\",\"name\":\"Lausanne\"}],\"location\":[{\"@type\":\"Place\",\"name\":\"PrismIA Gen\u00e8ve\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Chemin Frank-Thomas 32\",\"postalCode\":\"1208\",\"addressLocality\":\"Gen\u00e8ve\",\"addressRegion\":\"GE\",\"addressCountry\":\"CH\"}},{\"@type\":\"Place\",\"name\":\"PrismIA Renens\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Rue de l'Avenir 28\",\"postalCode\":\"1020\",\"addressLocality\":\"Renens\",\"addressRegion\":\"VD\",\"addressCountry\":\"CH\"}}],\"knowsAbout\":[\"Intelligence artificielle\",\"Formation IA\",\"Audit IA\",\"Int\u00e9gration IA\",\"Conseil IA\",\"Gouvernance IA\",\"IA g\u00e9n\u00e9rative\",\"Strat\u00e9gie IA\",\"IA en entreprise\",\"IA responsable\"],\"priceRange\":\"$$\",\"openingHoursSpecification\":{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\"],\"opens\":\"09:00\",\"closes\":\"18:00\"},\"foundingDate\":\"2024\",\"slogan\":\"B\u00e2tissez le futur de votre entreprise avec des solutions IA s\u00e9curis\u00e9es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/#\\\/schema\\\/person\\\/f85b1d436a6b6ca8b1f0e2fe00112701\",\"name\":\"\u00c9quipe PrismIA\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g\",\"caption\":\"\u00c9quipe PrismIA\"},\"url\":\"https:\\\/\\\/www.prismia.ch\\\/en\\\/author\\\/adminfba\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Shadow AI: ban it, ignore it or manage it? | PrismIA","description":"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/","og_locale":"en_US","og_type":"article","og_title":"Shadow AI: ban it, ignore it or manage it? | PrismIA","og_description":"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.","og_url":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/","og_site_name":"PrismIA","article_published_time":"2026-10-28T14:51:38+00:00","article_modified_time":"2026-10-28T17:12:20+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg","type":"image\/jpeg"}],"author":"\u00c9quipe PrismIA","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u00c9quipe PrismIA","Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#article","isPartOf":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/"},"author":{"name":"\u00c9quipe PrismIA","@id":"https:\/\/www.prismia.ch\/en\/#\/schema\/person\/f85b1d436a6b6ca8b1f0e2fe00112701"},"headline":"Shadow AI: ban it, ignore it or manage it?","datePublished":"2026-10-28T14:51:38+00:00","dateModified":"2026-10-28T17:12:20+00:00","mainEntityOfPage":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/"},"wordCount":2879,"publisher":{"@id":"https:\/\/www.prismia.ch\/en\/#organization"},"image":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg","articleSection":["Articles"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/","url":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/","name":"Shadow AI: ban it, ignore it or manage it? | PrismIA","isPartOf":{"@id":"https:\/\/www.prismia.ch\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#primaryimage"},"image":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg","datePublished":"2026-10-28T14:51:38+00:00","dateModified":"2026-10-28T17:12:20+00:00","description":"Your employees use AI without telling you. Why it happens, the risks by priority and how to manage it: governance, AI policy, AI gateway, training.","breadcrumb":{"@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#primaryimage","url":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg","contentUrl":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2026\/10\/a2-shadow-cover.jpg","width":1024,"height":1024,"caption":"Illustration : un open space vu de haut o\u00f9 deux \u00e9crans s'allument en orange, et des donn\u00e9es s'\u00e9chappent par la fen\u00eatre vers un nuage"},{"@type":"BreadcrumbList","@id":"https:\/\/www.prismia.ch\/en\/shadow-ai-swiss-companies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.prismia.ch\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Shadow AI: ban it, ignore it or manage it?"}]},{"@type":"WebSite","@id":"https:\/\/www.prismia.ch\/en\/#website","url":"https:\/\/www.prismia.ch\/en\/","name":"PrismIA","description":"","publisher":{"@id":"https:\/\/www.prismia.ch\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.prismia.ch\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","ProfessionalService"],"@id":"https:\/\/www.prismia.ch\/en\/#organization","name":"PrismIA S\u00e0rl","url":"https:\/\/www.prismia.ch\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.prismia.ch\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2024\/11\/PIA_logo_415x90-e1739004471809.webp","contentUrl":"https:\/\/www.prismia.ch\/wp-content\/uploads\/2024\/11\/PIA_logo_415x90-e1739004471809.webp","width":200,"height":43,"caption":"PrismIA S\u00e0rl"},"image":{"@id":"https:\/\/www.prismia.ch\/en\/#\/schema\/logo\/image\/"},"description":"PrismIA est une agence d'intelligence artificielle bas\u00e9e \u00e0 Gen\u00e8ve. Nous accompagnons les PME et grandes entreprises suisses dans l'adoption responsable de l'IA : conseil strat\u00e9gique, formations sur mesure, audit et int\u00e9gration de solutions.","address":{"@type":"PostalAddress","streetAddress":"Chemin Frank-Thomas 32","postalCode":"1208","addressLocality":"Gen\u00e8ve","addressRegion":"GE","addressCountry":"CH"},"telephone":"+41 22 566 94 00","email":"info@prismia.ch","geo":{"@type":"GeoCoordinates","latitude":46.203807649278424,"longitude":6.1732832963451445},"sameAs":["https:\/\/www.linkedin.com\/company\/prismia-ch","https:\/\/www.wikidata.org\/wiki\/Q141779554"],"areaServed":[{"@type":"Country","name":"Switzerland"},{"@type":"AdministrativeArea","name":"Suisse romande"},{"@type":"AdministrativeArea","name":"Vaud"},{"@type":"City","name":"Gen\u00e8ve"},{"@type":"City","name":"Lausanne"}],"location":[{"@type":"Place","name":"PrismIA Gen\u00e8ve","address":{"@type":"PostalAddress","streetAddress":"Chemin Frank-Thomas 32","postalCode":"1208","addressLocality":"Gen\u00e8ve","addressRegion":"GE","addressCountry":"CH"}},{"@type":"Place","name":"PrismIA Renens","address":{"@type":"PostalAddress","streetAddress":"Rue de l'Avenir 28","postalCode":"1020","addressLocality":"Renens","addressRegion":"VD","addressCountry":"CH"}}],"knowsAbout":["Intelligence artificielle","Formation IA","Audit IA","Int\u00e9gration IA","Conseil IA","Gouvernance IA","IA g\u00e9n\u00e9rative","Strat\u00e9gie IA","IA en entreprise","IA responsable"],"priceRange":"$$","openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday"],"opens":"09:00","closes":"18:00"},"foundingDate":"2024","slogan":"B\u00e2tissez le futur de votre entreprise avec des solutions IA s\u00e9curis\u00e9es"},{"@type":"Person","@id":"https:\/\/www.prismia.ch\/en\/#\/schema\/person\/f85b1d436a6b6ca8b1f0e2fe00112701","name":"\u00c9quipe PrismIA","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2619264a052e1a18076dda6abefba860e4b5ec9a9eec150639a8299e04517dc6?s=96&d=mm&r=g","caption":"\u00c9quipe PrismIA"},"url":"https:\/\/www.prismia.ch\/en\/author\/adminfba\/"}]}},"_links":{"self":[{"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/posts\/5186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/comments?post=5186"}],"version-history":[{"count":5,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/posts\/5186\/revisions"}],"predecessor-version":[{"id":5201,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/posts\/5186\/revisions\/5201"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/media\/5032"}],"wp:attachment":[{"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/media?parent=5186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/categories?post=5186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prismia.ch\/en\/wp-json\/wp\/v2\/tags?post=5186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}